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The following listing of claims replaces all prior versions and listing of claims in the application. 
LISTING OF CLAIMS 
J_- 18. (Pre viously cancelled) 

T , ^ 

tft^ \ (Presently amended) A system for ciphering a packet in a data stream received by i 

communrci^lion device, said system comprising: 

\a first communication port for receiving said data stream; 

a second communication port for transmitting a ciphered data stream associated 
with skid data stream; 

a memory\levice having 

a meimory buffer; 

a first access port connected to said memory bufl'er; and 

a second acc^ port connected to said jmemory bufler; 

a data processing proces^r connected to said first communication port, said 
second communication por^and said first access port via a first bus; 

and 

a ciphering processor connected \o said second access port via a second bus, 

wherein said first access port and said second access port eacn provide access to said memory 
buffer; said data processing processor is adapted to reteeive said data stream from said first 
communication port through said first bus, to identify astart and an end of said packet, to store a 
file associated vwth said packet in said memory buffer through said first bus and to retrieve said 
ciphered data from said memory buffer through said first busjfor transmission throvigh said 
second communications port; said data nrocessor further comnrises a securilv module to 



determine a security context relating to at least one source ofjsaidMata stream and a destination 



f9Ty g'^?4 u.9.i ph<?re( ; l diita_s^^ to store said security contejcLjn <iu]<^ iTtemprv b" ffer lb;;,,access„ by 
galdjjpbering-Ptocessor and to retrieve a «iven security cont ext from ^id memory buffer for u^e 
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iiTgenerating said ciphered data stream : and said ciphering pit)cessor is adapted to retrieve said 
file mmi said memory buffer over said second bus to generate said ciphered data stream from 
said filcJ\to generate integrity check information for said ciphered data stream using contents of 
said file aoK^to provide said ciphered data stream to said menlory buffer through said second bus. 

^ \ 1. 

■2Q. j(Previou^ly presented) The system for ciphering a pat kel in a data stream as claimed in 

claim irk. wherein^Kiid ciphering processor includes an encryption module for generating said 

ciphered data strcam\nd a hashing module for generating saia integrity check information. 




jCPreviously presen^d) The system for ciphering a packet in a data stream as claimed in 
claim Kl, wherein said ciphoring processor includes an cncry Jtion module for generating said 
ciphered data stream and a module for generating said integrity check information. 



(Previously presented) The i^stcm for ciphering a packet in a data stream as claimed in 
claim's^ wherein said encryption ni^ule includes a DES en iryption module for perrorming one 
of DES and triple-DES encryption. 



(Previously presented) The system for ciphering a packet in a data stream as claimed in 
claim ^ wherein said hashing module includes a HMAC hashing module for encoding said 
mtegrity check information within said ciphereoydata stream. 



(Previously presented) The system for cipheting a packet in a data stream as claimed in 



claim ni^wherem said memory buffer comprises duaNport random access memory. 



25. (Herein cancelled) 

26. (Herein cancelled) 




(Presently amend edi The system for ciphering a packh in a data stream as claimed in 
claim 36 ^ wherein said data processing processor comprises a security address module, said 
security address module stojcs an address associated with said security context in said memory 
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bufter, said address based on said at least one of said source of said data stream and said 
destination for st^d ciphered data stream. 




(Presently amended) The system for ciphering a packet in a data stream as cl aimed in 
claim 35-^^ wherein sahi security module provides an indication to said data processing 
processor when a security c^text is not present in said memory buffer. 

(Previously presented) THc system for ciphering a packet in a data stream as claimed in 
claim t9> wherein said data processing processor operates asynchronously to said ciphering 
processor. 

■5Ql (Previously presented) The system lor ciphering a packet in a data stream as claimed in 
claim wherein said data processing proces^r is clocked by a first clock source, said 
ciphering processor is clocked by a second cloclK^ource and said first clock source is 
asynchronous to said secojid clock source. 




31 . (Previotisly cancelled) 



(Previously presented) The system for ciphering a packet in a data stream as claimed in 
claim wherein said data sceam received at said first communications port comprises 
Iragments of a packet, said da a processing processor stores said fiagmcnts in said memory 
buffer to assemble said packet and said ciphering processor generates said ciphered data stream 
fi-om said assembled packet. 



12- 

3S, (Previously presented) The system for ciphering a padket in a data stream, as claimed in 
claim wherein .said system is disposed at a gateway between a private network and a public 
network in a secure virtual private nelVvork, said first commu oications port is connected to one of 
said private network and said public network and said sccont communications port is ctmnected 
to another one of said private network and said public network. 
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■34A (Presently amended) A method for ciphering a packei in a data stream received by a 
cornimmication device having a first cornmunication port forjreceiving said data stream, a second 
commuiilcation port for transmitting a ciphered data stream associated with said data stream, a 

V i 

memory device including a memory buffer and a first and a second access ports connected to 
said memorylsuffer, said communication device further having a data processing processor 
connected to said first communication port, said second communication port and said access port 
via a first bus an(m ciphering processor connected to second access port via a second bus, said 
method comprising: 

receiving said da^ stream from said first commimicatlon port for processing by said data 
processing processor; 

identifying a start andVn end of said packet by said data processing processor; 



storing a file associated wi^th said packet in said mem9ry buffer by said data processing 
processor through said first Vis; 

retrieving said file from said mepiory buffer by said cjiphering processor over said second 
bus; 



generating said ciphered data strearnVrom said file b> 



generating integrity check information fbr said ciphcrbd data stream using contents of 
said file by said ciphering processor; and 

providing said ciphered data stream to said s^ond communication port ; 
i yftie3 /ing ^ a ,^ecuyjitY,,c„p n t ^^^^ in acncratipR said cinhered data 



said ciphering processor; 



delerminin« a security context relating to at least one 



a^gs tin alion for said ciphered data stream: and 
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storvntz said security (^^nte xt in ^a id memory buffer, 



accessN;>le hv sai d cinherinL> nmcessor . 
^ (Pr 




resently amended) Hie method for ciphering a packjet in a data stream as claimed in 
claini, jt4. said m e tho^ Furth e r compriaing 



id security context, , rStorcd.,ia(giag 



fetrjoving - a - 3ccurii^y context from m e mory for uk b in goncmting - s aid ciph e r e d data 
g trcom ' ; 



d e t e rmining a security c&m e Ht r e lating to at loa s t - onc of a s ourc e of said data stroom and 
a - de s tination for sold ciph e r e d data i itr e am; and 

storing said s e curity cont e xt ig is aid memory buff e r, said o e ourity cont e xt stored being 



acc e ssibl e by said ciph e rin g procV mo or 
S<hcl^ein^said.■Cipbc^e.d_da^£Lat^pam is tienerated hv an encrvot 



?ro<;^<i<K ;)r an4 ;jiai(j, . inteayity chcck.,iriformation Is generated bv a ha^shj in Ajnodulcja^aid 



pn^moduleicusaid cinherina 




(New) ThXmethod for ciphering a packet in a data stream as claimed in claim 
wherein said ciphering processor includes an encryption mod ule for generating said ciphered 
data stream and a moduRi for generating said integrity check anformaiion. 



(New) The metliod for\iphering a packet in a data sti^eam as claimed in claim-S^ 



wherein said encryption module^rthcr performs one of DE^ and triple-DES encryption: utilizing 
aDES encryption module. 

II \ ' ^ 

■58- (New) The method for cipheringVa packet in a data stream as claimed in claim 

wherein said hashing module further encodes said integrity check information within said 

ciphered data stream utilizing a HMAC hashing module. 
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"3*). \ (New) The method for ciphering a packet in a data siream as claimed in claim-^S, 
wherein, said memory buffer comprises dual port random access memory. 




4C^ (J*iew) The method for ciphering a packet in a data stream as claimed in claim ' 
wherein sai<i data processing processor fiirther stores an address associated with said security 
context in saiil memory buffer, said address based on said at ^east one of said sourcie of said data 
stream and saidxjestination for said ciphered data stream. 

56 \ IS 

(New) The method for ciphering a packet in a data stream as claimed m claim 

wherein said security inodule provides an indication to said data processing processor when a 

security context is not present in said memory buffer. 

(New) The method for ciphering a packet m a data strtjam as claimed in claim 44^ 



wherein said data processing processor is clocked by a first c 
processor is clocked by a secon\clock source and said first c 
second clock source. 

^ (New) A system for ciphering \packet In a data stream received by a communication , 
device, said system comprising: 

a first communication port f6f receiving said data stream; 



ock source, said ciphering 
ock source is asynchronous to said 



a second communication port f<^ transmitting 
with said data stream; 



a memory device liaving 
a memory buffer; 
a TiTst access port connected to saiil memory bulTer; and 
a second access port connected to sai 



a ciphered data stream associated 



a data processing processor connected to said 



memory buffer; 
,St communication port, said 



second communication port and said first access port via a first bus, said data 
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prociessor comprising a security module to determine 
at leasi one source of said data stream and a 
stream, to store said security context in said m^emory 
ciphering processor and to retrieve a given secjurity 
buffer for us\in generating said ciphered data 

and 



a security context relating to 
destination for Said ciphered data 
buffer for access by said 
context from said memory 
stream; 



a ciphering processor connected to said second access port via a second bus, 



wherein said first access port and said\econd access port each 
buffer; and said ciphering processor provides said ciphered 
through said second bus. 



data 
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